some tweaks in client auth